CVE-2022-40897

High

Advisory

Published 23 Dec 2022In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.026; 85th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 757; of 17,787 indexed, latest versions
Container images: 786; deployed by those charts
Fix available: 14 of 14; affected packages

pypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS)

Carried by container images the latest versions of 757 of 17,787 indexed charts deploy, on 786 images.

Affected package	Affected versions	Fixed in	Images
setuptoolspypi	0.9.8, 20.7.0, 20.8.0, 29.0.1.post20161130+83 more	65.5.1	755
python-setuptoolsrpm	39.2.0-5.el8, 39.2.0-6.el8	0:39.2.0-6.el8_7.1	62
setuptoolsdeb	45.2.0-1, 59.6.0-1.2	45.2.0-1ubuntu0.1, 59.6.0-1.2ubuntu0.22.04.1	53
python-pipdeb	1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+7 more	1.5.4-1ubuntu4+esm2, 8.1.1-2ubuntu0.6+esm3, 9.0.1-2.3~ubuntu1.18.04.6, 20.0.2-5ubuntu1.7+1 more	52
python-setuptoolsdeb	3.3-1ubuntu1, 3.3-1ubuntu2, 20.7.0-1, 39.0.1-2+1 more	3.3-1ubuntu2+esm1, 20.7.0-1ubuntu0.1~esm1, 39.0.1-2ubuntu0.1, 44.0.0-2ubuntu0.1	34
python3x-setuptoolsrpm	41.6.0-5.module+el8.5.0+12205+a865257a, 50.3.2-4.module+el8.5.0+12204+54860423	0:50.3.2-5.module+el8.8.0+21635+a173a6fa	6
python39rpm	3.9.16-1.module+el8.8.0+18968+3d7b19f0.1	0:3.9.16-1.module+el8.8.0+20025+f2100191.2	5
python-chardetrpm	3.0.4-7.el8	0:3.0.4-19.module+el8.4.0+9822+20bf1249	3
python-idnarpm	2.5-5.el8	0:2.10-3.module+el8.4.0+9822+20bf1249	3
python-pysocksrpm	1.6.8-3.el8	0:1.7.1-4.module+el8.4.0+9822+20bf1249	3
python-requestsrpm	2.20.0-2.1.el8_1, 2.20.0-3.el8_8	0:2.25.0-2.module+el8.4.0+9822+20bf1249	3
python-urllib3rpm	1.24.2-5.el8	0:1.25.10-4.module+el8.5.0+11712+ea2d2be1	3
python3x-piprpm	19.3.1-6.module+el8.7.0+15823+8950cfa7	0:20.2.4-7.module+el8.6.0+13003+6bb2c488	1
python-plyrpm	3.9-9.el8	0:3.11-10.module+el8.4.0+9822+20bf1249	1

OSV records: GHSA-r9hx-vwmv-q579 RHSA-2023:0835 RHSA-2024:4421 UBUNTU-CVE-2022-40897
Also known as: BIT-setuptools-2022-40897, PYSEC-2022-43012, RHSA-2023:7395, USN-5817-1

Charts affected

757 by stars

Chart

Latest

Affected images

Radar Score

powerdnsadminwitcom-gmbh

0.3.4

1 of 1 See more

powerdnsadmin witcom-gmbh 0.3.4

1 of the 1 container images this version deploys carry CVE-2022-40897.

Container image	Digest	Package	Fixed in
ngoduykhanh/powerdns-admin :v0.2.4	ba36ab196d3d	setuptools@51.3.3	65.5.1

Open the chart page →

2,643

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2022-40897.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/workshop-pipelines :latest	e383ba3e0966	setuptools@39.2.0 python-setuptools@39.2.0-6.el8	65.5.1 0:39.2.0-6.el8_7.1

Open the chart page →

11,577

xkopsxkops

0.1.0

2 of 5 See more

xkops xkops 0.1.0

2 of the 5 container images this version deploys carry CVE-2022-40897.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	setuptools@58.1.0	65.5.1
murtazashah46/helmfile :latest	4d11726cf803	setuptools@58.1.0	65.5.1

Open the chart page →

13,677

keycloakxzaks

2.2.0

1 of 1 See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2022-40897.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	setuptools@39.2.0 python-setuptools@39.2.0-6.el8	65.5.1 0:39.2.0-6.el8_7.1

Open the chart page →

6,016

sockpuppetbrowserzekker6

0.1.0

1 of 1 See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-40897.

Container image	Digest	Package	Fixed in
dgtlmoon/sockpuppetbrowser :latest	f166a963b550	setuptools@65.5.0	65.5.1

Open the chart page →

1,589

alertmanager-matrix-forwarderzloi-space

1.0.1

1 of 2 See more

alertmanager-matrix-forwarder zloi-space 1.0.1

1 of the 2 container images this version deploys carry CVE-2022-40897.

Container image	Digest	Package	Fixed in
matrixdotorg/pantalaimon :v0.10.4	ba6a587fa508	setuptools@57.5.0	65.5.1

Open the chart page →

3,118

grafana-matrix-forwarderzloi-space

1.0.0

1 of 2 See more

grafana-matrix-forwarder zloi-space 1.0.0

1 of the 2 container images this version deploys carry CVE-2022-40897.

Container image	Digest	Package	Fixed in
matrixdotorg/pantalaimon :v0.10.4	ba6a587fa508	setuptools@57.5.0	65.5.1

Open the chart page →

1,636

Container images carrying it

786 by charts deploying them

A fixed version is listed for 14 of the 14 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/mysql :5.7	4bc6bc963e6d	setuptools@58.1.0	65.5.1	22
oomk8s/readiness-check :2.0.2	875814cc853d	setuptools@40.8.0 python-pip@8.1.1-2ubuntu0.4 python-setuptools@20.7.0-1	65.5.1 8.1.1-2ubuntu0.6+esm3 20.7.0-1ubuntu0.1~esm1	11
codeurjc/server :v1.0	310bea5b1ee7	setuptools@39.2.0 python-setuptools@39.2.0-6.el8	65.5.1 0:39.2.0-6.el8_7.1	8
oomk8s/readiness-check :2.0.0	7daa08b81954	setuptools@39.0.1 python-pip@8.1.1-2ubuntu0.4 python-setuptools@20.7.0-1	65.5.1 8.1.1-2ubuntu0.6+esm3 20.7.0-1ubuntu0.1~esm1	6
cachethq/docker :2.3.15	a61ff0f67ea7	setuptools@33.1.1.post20171031	65.5.1	4
mastercloudapps/server :v2.23	f3d24dfe2686	setuptools@39.2.0 python-setuptools@39.2.0-6.el8	65.5.1 0:39.2.0-6.el8_7.1	4
ncsa/checks :1.0.1	cc46a03e16ed	setuptools@57.5.0	65.5.1	4
quay.io/strimzi/operator :0.37.0	52f376e64b9b	setuptools@39.2.0	65.5.1	4
argoproj/argocd :v1.8.1	830e86cacefd	setuptools@40.8.0	65.5.1	3
cloudve/cloudlaunch-server :latest	4a3d7fae90bb	setuptools@45.2.0 python-pip@20.0.2-5ubuntu1.6 setuptools@45.2.0-1	65.5.1 20.0.2-5ubuntu1.7 45.2.0-1ubuntu0.1	3
dnationcloud/kubernetes-jsonnet-translator :2.0.1	78fed4f3c130	setuptools@57.5.0	65.5.1	3
dpage/pgadmin4 :6.12	781369df9994	setuptools@52.0.0	65.5.1	3
kiwigrid/k8s-sidecar :0.1.193	170069ff0976	setuptools@49.6.0	65.5.1	3
kiwigrid/k8s-sidecar :0.1.151	7b98eecdf6d1	setuptools@46.1.3	65.5.1	3
paulkellerman/resultserver-app :1.0	381eeccb0618	setuptools@65.5.0	65.5.1	3
paulkellerman/webserver-app :latest	5a37b74f61b9	setuptools@65.5.0	65.5.1	3
selenium/hub :3.141.59	02f251d48d5f	setuptools@45.2.0-1	45.2.0-1ubuntu0.1	3
quay.io/kiwigrid/k8s-sidecar :1.14.2	35654389f8a9	setuptools@57.5.0	65.5.1	3
quay.io/kubernetes_incubator/nfs-provisioner :v2.3.0	f402e6039b3c	setuptools@40.8.0	65.5.1	3
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	setuptools@39.2.0 python-setuptools@39.2.0-6.el8	65.5.1 0:39.2.0-6.el8_7.1	3
amancevice/superset :0.35.2	12a0a9e66550	setuptools@44.0.0	65.5.1	2
amazon/opendistro-for-elasticsearch :1.13.3	2acfa1dcc5f8	setuptools@0.9.8	65.5.1	2
apachepulsar/pulsar-manager :v0.1.0	b341ef76a852	setuptools@40.6.3.post20190116	65.5.1	2
aquasec/kube-hunter :0.6.8	e64fe49f059f	setuptools@57.5.0	65.5.1	2
architectminds/aws-kubectl :1.1	9735e59a1085	setuptools@41.0.1	65.5.1	2
blakeblackshear/frigate :0.11.1	8330b0a265b8	setuptools@52.0.0	65.5.1	2
confluentinc/cp-kafka :6.2.11-1-ubi8	ac776fad95a5	setuptools@50.3.2 python39@3.9.16-1.module+el8.8.0+18968+3d7b19f0.1 python3x-setuptools@50.3.2-4.module+el8.5.0+12204+54860423	65.5.1 0:3.9.16-1.module+el8.8.0+20025+f2100191.2 0:50.3.2-5.module+el8.8.0+21635+a173a6fa	2
confluentinc/cp-zookeeper :latest	7610a50b13e7	setuptools@39.2.0	65.5.1	2
confluentinc/cp-zookeeper :6.2.11-1-ubi8	cae577096489	setuptools@39.2.0 python39@3.9.16-1.module+el8.8.0+18968+3d7b19f0.1 python3x-setuptools@50.3.2-4.module+el8.5.0+12204+54860423	65.5.1 0:3.9.16-1.module+el8.8.0+20025+f2100191.2 0:50.3.2-5.module+el8.8.0+21635+a173a6fa	2
datawire/aes :1.14.4	8588eafe6862	setuptools@50.3.2	65.5.1	2
devopsjourney1/mywebapp :latest	bd1ec6838570	setuptools@57.5.0	65.5.1	2
gradiant/spark :2.4.4-python-alpine	97657d56e927	setuptools@41.6.0	65.5.1	2
hjacobs/kube-ops-view :20.4.0	58221b57d4d2	setuptools@46.1.3	65.5.1	2
hookiesolutions/webhookie :latest	0629694246ba	setuptools@45.2.0-1	45.2.0-1ubuntu0.1	2
istio/examples-bookinfo-productpage-v1 :1.15.0	0a5eb4795952	setuptools@41.0.1	65.5.1	2
istio/examples-bookinfo-productpage-v1 :1.14.0	22a0410f35a8	setuptools@41.0.1	65.5.1	2
jvstein/bitcoin-prometheus-exporter :v0.6.0	7645ba790ea8	setuptools@57.0.0	65.5.1	2
kodekloud/examplevotingapp_vote :v1	3a856afb02a3	setuptools@58.1.0	65.5.1	2
larribas/mlflow :1.9.1	05ccb0b46bfb	setuptools@46.1.3	65.5.1	2
library/mysql :8.2.0	212fe73edca5	setuptools@50.3.2	65.5.1	2
library/python :3.7.0-alpine3.8	e12594db7297	setuptools@40.4.3	65.5.1	2
library/python :3.7	eedf63967cdb	setuptools@57.5.0	65.5.1	2
library/python :3.7-alpine	f3d31c8677d0	setuptools@57.5.0	65.5.1	2
lncm/specter-desktop :v1.10.5	36eaa06f99f4	setuptools@57.4.0	65.5.1	2
locustio/locust :2.32.2	a0d4b88e42c1	setuptools@65.5.0	65.5.1	2
matrixdotorg/pantalaimon :v0.10.4	ba6a587fa508	setuptools@57.5.0	65.5.1	2
minio/operator :v4.3.7	54393e03f3b2	setuptools@39.2.0 python-setuptools@39.2.0-6.el8	65.5.1 0:39.2.0-6.el8_7.1	2
nachomillangarcia/prometheus_aws_cost_exporter :latest	e4ce056f2d6d	setuptools@40.2.0	65.5.1	2
ncsa/checks :1.0.0	abf6300b57b7	setuptools@49.2.1	65.5.1	2
neilpeterson/azure-vote-front :v3	84062718347c	setuptools@38.2.4	65.5.1	2